Arthur Besse@lemmy.ml to

Fediverse@lemmy.mlEnglish · 3 年前

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

186

Mastodon security update: every version prior to today's is vulnerable to remote user impersonation and takeover

Arthur Besse@lemmy.ml to

Fediverse@lemmy.mlEnglish · 3 年前

Remote user impersonation and takeover

### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as...

Chat

AngieStone 🌳 :polarbear:@mastodon.social
link
fedilink
arrow-up
6·
3 年前
@cypherpunks
German news:
https://www.heise.de/news/Mastodon-Diebstahl-beliebiger-Identitaeten-im-foederierten-Kurznachrichtendienst-9615961.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege
- androidul@lemmy.ml
  link
  fedilink
  arrow-up
  1·
  3 年前
  nett hier